i don't...I use ~/httpd/cgi-bin/tmp :-)  i'm a virtual server on a shared
machine with no root access, so i have to do it this way...the server runs
under my uid, too, so others can't see it that way either...

jb

----- Original Message -----
From: Erich L. Markert <[EMAIL PROTECTED]>
To: Jon Brisbin <[EMAIL PROTECTED]>
Cc: ___cliff rayman___ <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, August 01, 2000 11:38 AM
Subject: Re: persistent problem: FIXED...well sorta


> /tmp isn't viewable via the web by default.  You would have to actually
> add a directive to httpd.conf to do so.
>
> I would strongly suggest placing this sessions directory somewhere else
> than /tmp.  Even if you change the ownership and permissions on the
> /tmp/sessions directory /tmp has very lax permissions because everyone
> is suppose to be able read/write to this temp storage...  That said, bad
> things can happen.  As a rule, NEVER, EVER trust data that has been
> stored in /tmp!
>
> Jon Brisbin wrote:
> >
> > > > OR if you just want to use a temp storage area then:
> > > >
> > > > BEGIN {
> > > > $ENV{EMBPERL_SESSION_CLASSES} = "FileStore SysVSemaphoreLocker";
> > > > $ENV{EMBPERL_SESSION_ARGS}    = "Directory=/tmp/sessions";
> > > > }
> >
> > I got this to work :-)  Which makes me happy...but one other question
before
> > I try it (not really Embperl related, but thought y'all would know :-):
> >
> > Can I put a <Files> directive in my httpd.conf to disallow viewing of
that
> > directory without affecting the script's execution??  It shouldn't be a
> > problem, right??
> >
> > thanks!
> >
> > jb
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
>
> --
> __________________________________________________________
> Mr. Erich L. Markert                     [EMAIL PROTECTED]
> Computer Learning Center TEL (914)422-4328
> Pace University
> 1 Martine Ave
> White Plains, New York 10606-1932
>
> Those who do not understand Unix are condemned to reinvent it, poorly.
>                 -- Henry Spencer
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to